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(54) ELECTRONIC TICKET SYSTEM 

(57)Abstract: 

PROBLEM TO BE SOLVED: To prevent an internal 
state of a certificate device from being revised due 
to a ticket exhibited by mistake or illegally. 
SOLUTION: An authentication information generating 
section 102 of an authentication device 100 
generates authentication information and sends it to 
a certificate device 200. A ticket discrimination 
information generating section 203 of the certificate 
device 200 generates ticket discrimination 
information to indicate storage of a correct ticket 
from ticket utilization information and information in 
an internal state storage area. A certificate 
information generating section 206 connects ticket 
discrimination information to low-order bits of a bit 
stream of the authentication information to generate 
ticket certificate information. The ticket certificate 
information is sent to the authentication device 100 
by a communication section 208. The authentication 
device 100 receiving the ticket certificate information 

conducts ticket discrimination processing and terminates the protocol when the ticket 
certificate information is incorrect or the ticket is not to be authenticated. 
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1 

=F9-^rv b ->X^AT&^T, 

*&< fct^EKEftBB^TWKi^E^y ht^f, 

^ tie w« m&±&Tz>Mwmm§ij&^®£ l, 

±Ett&ESBl±. 

t, ttaEfflasssEfTLTS^^&wft-r*^^^ h«« 

Tfc^T, 

Tsi8iiE««£fi6*R£*rL, 

*U&BaE«**ffl^T±HBIEKfl»«&*^'r*ffi?-^ 

irs/h ->X5^A. 

[»#a3] If *«2 fcEaaa^^y h isX^-A 
T&oT, ±EI£^B£±E&liE&B£teiim¥ ; i8:£ 

±EttfiESfi fcfilt S «, h 

[ §1*314] »*a2&^L 3 Kiewom^^r y h 

±Ea-=P3 1 4r *, h 5/Xri*li, ±EttfiESBi:±BIiE.0i 
&B£lc;bn*T, ^Sry h#fr8B£*L, 

ybwmmmt, ±te7*y bRffm&w»mmifitm 

««F*R(C«»UT^4±EEe§felBH*r*«i*ffl^ 



10 [«f*«7] »*Ji5 KEaoa^^^ry h^X^A 

[R*2f8] »*9I6 fcEacoa^F^iry hv-X^A 
T&oT* ±E£E^glilte, gr*fcl*3«ttlS£fil#T* 

t&a A Sa^^^ry h y^fA, 
Ciif#3l9]- 8 tE-flR^a^^iry h->X.7-A 

±EiE^SB<D^gB^SgEli^^^^^$ffl^^a : ? 1 5 1 

'[a*5I10]. »*:B8fetr>L,9 ©a^iry hS'X 
f AT^'sT, ±BflEHSB0rtffWfliBtttttt*ffttt 

[I&Sfc^ 1 1 3 l**«8fcHL 1 0 OWfiry hi/ 
T^AT&oT, ±ESE91£B0E9itt 

30 ±EaEW»fiH*l»«t*ffi^T±EiEW»«*fff 

[MF3&91 1 2} BI#S8&t*L i l-©a^^4ry b is 
X^AT&oT, iES^eifi, ±E*8E¥a^6Si 
£*ifc±EEE««£«#T4&ESEtt««»^R*W 
U ±BSE9i*«£jS^SMt, ±E?4ry 

TiESE^Wao^fiEfcfiJfflTSa^^dry h^X^ 
A. 

40 [»*J113] »*ai20«ffjryhS/XfAt 

* bVlfem $8£M t L, ±EBSE««*CfT«» t, ± 
E&E^SBOIEHMF«S£dc¥gl:» v ±EBffiE*«««¥ 
afC«»$nTtfi*BBEfl»«C$, C KM£&£ 

[W*J1 1 4] n#iil 2^UL1 3coa^^^r^> 
t*ct^«T*0, ±E^dr y hffiEW««fi, JLE 

so rtrybt* ±m^iry bmmmmt. ±fcmwmm&\ 



( 3 

3 

*«* t J: OWft^arttT^^y hft*fll«ll*tUFL. 

l 5] flf££ 1 4 K y^fAT 

&oT, p, q*«*RT*D, n = p- qt*!3, DE 
= 1 mod (p-1) Cq - 1 ) OH«*t*fcSn 

±E3 L ^Jry ha«««^DTf*0, '^dry h 4i 
(n. E) ±E^iry N*iJffl*«^L 

f (du, L, n) £ — 2? [rJ fS: HH fcfc <h IT, firy hd« 1C 
t=D-f (du, L, n) t^Aentl^tt, ± 
EffiM«B©BEW*«£ri&#»tt, ±E3gSE«ac (± 

©fen t tc«fc3^3t<h, CcofenTCD — ^rnJtt§€^ 
If (du, L, n) las^tCtenttOlgC'C 
' ""•'•■> mod nilW^ h SHfftt *H-ff 

fc-^T, p, q*«lflfP»D, n = p-q"C&0, DE 

= 1 mod (p-i) ( q - i ) <Dmm&Mfzzn 20 

(n. E) -e&O, ±E^^y hfiJffl*«3^L 
T&O, ±EBEW«fiffl*««*«»*fli)«d 
f (du, L, n) Sr-#|RlttlW«fc£ It, ±E^y 
M*t-=D-f (du, L, n) -C5-*.6*lTH*£ 

±E&*E&@te, *6)&»i;«6t + f (du, L, 
n) = D*«-J)CL. -t©ffl€rffi^T, ±ESSiEtirac 
(±EiE^««^J«^l!:^J6EUfcBIE«*) Kit L 
T, T = C B mod niLTfiry MEi»8T4 

p^*»r*0, Stxt;jfctLTy = g , mod p# 

y h'Ammmtf (y , p, g) -ea ±e^*- y h« 

ffii»«75«L-e*0, ±ESE^ftBQ#««^eiS(0«td 
uT&O, f (du, L, y) Z-JjfaHkm&t IT, 
i!2f^ryh^t = x- f (du, L, y) T^x^n 
TV>*£&, ±EE9ISBtt 1 ±EBK1»tBC (±EK 

fcVVCD-XftftLMftm f (du, L. y) 
***£©ftpT©«C' C 1 l ' rl modnHT 

1 8 3 Mf$£ 1 4 (Dm^T-tr y h^fAT 

p^*»"C*0, itxf:MLTy = g'mod p# 

* (y ( p, g) T^O, ±E3 L Sr* K fij 

iWLno, ±ssiB^^egf^i^i.§ ©id so 
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4 

uT&O, f (du, L, y) £-;£rfr£iC$:<h LT, 
±E^^T'> h# t = x - f (du, L, y) T4A5tl 
T^3££, ±E&E91£Btt. *€i^i;«&t + f (d 
u. L, y) = x £§f-|£b, ±EBiE« actCttLT 
(±EE9ifc«£jS¥a:#«HL&efc1*tt) flry h 
WS»«.T*tt#*r*Bfc:, C 1 mod p^I^ffl 

1 9 ] HF2&JI 1 4ftHl/l 8 (om^^^r y V 
*>^fAT*-pT, ±EttlE&B0E9ifit«BttE^§!: - 
«, ±EBHE««*J«¥»*^ja5UfcKIE««i:, ±E 
EESB^Sa&fcJftfc? 1 * y hE9§fi» it, ±E^^^ 

BEL, ±E^^ry hE9H*«*<iELH«£tt, ±E^^ 
y hEWttrttfcSa&Stlfc^irty S^J^if a^^tiiT 
^m^^^ry h y X t A , 

[lf$«2 0] 1 9 onmry Ny^fAT 

*?T, ±EBEff i^CTfe O , ±E5 1 ^ryhSE^^ 
^^TT^O : ,.-±SSf^7h^§Ht8 (n, E) 

ttftttE^Ktt. ±IBfiryME*»«TSttnTEtr 

T e mod n « C I I M (E# I I tt fcf y bM 
i:fc-pTH*i«, ±E^4ry HEf!f**ttjEl, 

fA, 

[«F#J»2 1 ] if^Jl 1 9 Ott^fr y hy^rAT 
^■^T, ±EBBEffiF WCT* 0 , ±Ef^ry HEWi 
«^T7*0, ±E^^rs/ h&ra««J&* (p, g, y) 
±EttBESIB©&E^tt«ttSE^Sr». g 

-a-fca** r it« t*. **tf!vh^iM*« 

*o-Tv T/y' mod p= (CI I M) (E^ ' 
I Mitfy h^lcoft*) t^-pT^nff. ±E^^^h 

try K->Z^A. 

Cff^^2 2] »3ft*I8&ML2 1 om^^^ry h^> 
XrAt^T, 

BIElta^±^-r^, ^2 ©BUElf a^^^gi, ±E 

ffi 2 OiEB^If a^HE^at^^b, 
±E*2©SEW«a*E*a«, ±EjB2 0^ffiEl*a 

±Eff 20BE^f»K^. ^Sry KiiBH*«£J:0± 
!BI 2 OEW»«!»«Eb^j5»il:5^*aEL, 
±Eft2(DE^««^iELlia*, ±Ert««»*l»* 

[g^^Jl 2 3 ] Iff #11 2 2 (Om^^try hy^fAT 
^oT, J:E«SEee<OIE^1ff«ttgiE^a». ±E^^r 
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©KHtf*£*J«?-3a>ga>£*3fcT3«^fry b^ 

fimZbr $> % O tmm? ZMT^tr y h^*5rA. 

[if #3! 2 5] gf^^2 2ftl»L2 4©lff^T7 h 
i/XfAT^^T, p" , <T *«*R-C*D, v = p* 

■q'7?&9, 6f = l mod ( p * - 1 ) ( q * 
-1) ©BB«A««fc$n« <t#(Z, ±I31iE(?/i£g<Z>SfS2 

[Rl] 

X — P 9 mod y 

I = mo d • 

b* * £±i3Jfl2 ©iEW**fc««>&3;njfctt«i:bT 

<0 SE 9i ft « rt> 6 S Hi £ n It fg f c t> <b ^ t> T ± IE ffi « 
h ->7fA. 

[»*«3 13 Hf*£3 OO^^f^ry h y^rAT 
*?T, ±CEH»B0±ES 2 <7>B911ffttttaiE¥i!t 

[HF#«3 2] m*m2 2&Hb3 1 com^^^ry K 
->7rAT*^T, ±BBttiESI&»* ±IB«litE^gO^ 40 

ttEESBttflM*fllft&ffi<!:. ±E* 2 OEHfll 

T £ Iff 2 <D IE 93 ft fg 4 ^Jc ffi & * b , 

±ffi» 2 ®KE9l1ftfB£/i&0tt. ±HB* 2 © 18 SE tit fg <h ± 

y h ->XfA. 
[§82fc*13 3] 1^^113 2©§ffir-; hv^fAT? 
ifcoT, ±Ktt8E«B»*««£ 0 £: b, *f*-r'-&.^B ' 
*«£ (v, c) ttSt*. ±f3&&Eg©COfg2 ©SE 
K«M4fi£«li. ±S3ffl 2 ©JSfiEtfH z J: 0 ±IB$g 2 © 50 



pA«*ft-C*0, SR€fc*fbT 

[R2] 

?} = g ¥ mod p 

&!&k> mmmm<Dm2(Dmm.mm±0Si^m 
\$, asr* £±ft®2<D$&mmmx = g r ' z±mL. 

±E* 2 <0EHttHtt&E#3:tt±eft 2 (OSEKWM /> tc 
OUT, p/V" mod p = x msnfcdSl: 

±ta jg 2 (DmwmmtfiEb ^ tmiz? % zmr^tr y b 

*>XrA. 

[lit #11 2 7] U!#JI2 2©S-?f 1 dr ! y hyXfAt 

At>r, ±issE9i«R<DjH2 z>M*Mm m&m^m\z, ± 
iB»2<oaEK««*tiEL^««ji, ±13^2 <DMwm m 

r 13*112 8] R3ft^2 7 0*ff^ry h yXrAT 
fc-sT, ±GBE^SfBa>!B2 ^»IE^flf«BttlE¥ga;». ± 
IB»2<OBEig*«^&*ffl$nfc««*, ±I3f^SS«^ 

[«#*2 9] Hsfclfl2 7&^b2 8 0«^ir-; h 

AyTiSO, ±K£iEH&K0jR2 0|E93ttHttliE^Rft. 
±EJB2©BiE*«z «t±i2»2©lE?BflMapi:7&«, £ 
* fcf* h JiJ// (CM IT, 
[R33 

CR4] 

p — X & mod u 

[§il#Jg3 4 ] if ^^3 2 (DM^nry b ->7fAT 

^ot, ±i3^iiE^^#^i^$g^ ^ . ^^-r^^^fta 

S ( P". ^ g V- 77 ) i 1/ , - 

CR5 J 

7? = g r mod p 

©HflR^Kt/tartlSttr. ±I3^iiE^gCQ^ 2 (DIEejft 
«*J56«Btt±E» 2 CDgglEff ^ x fCttLT. 
CR6] 

X f mod p 

<Ott*ffiHT±EIS 2 <Z>SE9l1ff«-0 ^^fiJc-T^^^^y 
hv^xAo 

[Hf3ft#3 5 ] 3 2 3ft lib 3 4 CD^^^^r y b 

^rAt^T, ±S3^IEglS(4±!3^2 OlSIElf $8 
£&#-T6, S 2 co^iIjt^^^^=&^b, ±EttffEg 

^T1->5tf^<h, ±SB^2<OK»E««J; 0±|2SB2 ©EW 

- tMF^lR 3 61- * -B*JH 3 2 ftn 134 ©a^^^r ^ h 
y^fAT^^T, ±I3^ffiE^!M©^ 2 ©>ffiE0^tf ^£fi£ 



7 

±E8EB«B©rt«ttJB©«M€:«¥^1-**«£ffi^ 
X, ±EJS2<DBE«*«l*SHC«ft<*ft;fc±EfB2© 

[»*fl3 7] n*a3 6 ©a^^iru/ h^TAT 
&^>T, ±'EttEE&B0ffi2 <D&VHtt&£&m±* ±E 

ESH2 CDggtElf$8£ % if* ±E£rl2 (0§8IEfi&& 
#fflfc«#«*nfc»2 (OKIE % fctf SSfi-Lfc* 

3 9 ] «f*:B&H 1/ 3 7 KEf&CDm^^y 
h^fAt^-pT, *&<<fcfe. ±EE9i*fi;>i, I 

T^**ff^y HS/Xf A. . 
[»*fl4 0] lEQIlKB^ttliEttBJi&^rL. ±ESE 

±EIE9!^Bf£, 

-fcE^iv h0>*«rt**fcte±E9 t $ry 

t t>±EgE^SHia#*«i:±E?dr5/ ht^S 

-± e ie w m e a* s ^ -r ± e-5 1 ■«« ft « • - 

±EIEW*iB^±EBEW«fiH*««<k±ffi^4ry 

CIf*J|4 1] ttSE&Bfcflt^dry h£#J$T*lg 
£cD-tf-lf *£HfrL, BESSB«-Crt««B*«3Er 

±EttBEKBa«, «;fc3*fc±E^y hWfcWMlcaS 
[0001] E 



( 5 ) * ftfflW- 1 1 - 2 2 5 1 4 3 

8 

[ 0 0 0 2 ] 

»36#, !slft#. ^'J^^-H, 

v h tLXRftTZUfr&fttDtiX^Z. 
[ 0 0 0 3 ] Z <D y h fij 

[0004] c©wjHK:#-r*, n?^itiT, a**, 

7- dry hOMfflRr(CjEa3ftfiJffl*^»wr«* 1 Oft* 
20 &«. ^fr*^©*!^^* h*«^T*«*fc**. 

[ 0 0 0 5 3 «1 (Dft^&fift*, ^dry h<E>#J/HI$fC*lJ 
Jfl#*«. iEM§&«ffl#j&»£5a»*«BT*#ST'*tK 

-rsttfiJofTtt^Bftftti*. «B0>&&fc&£ttffirH 
30 (*rj£*tt£ffifffi) *Afc*«£*#*^#«>fl|« 

ifi^irv htLT*ff*ti, «Jfl#**E»tf SI"*. « 
frSJK-*©*****!^*.;/ h H J; 5 icT 

[0006] L,a>i,fca*6, c^^iitft w^rsw 
[ooo7] mmmftfcm $k\z*m%<D%7ttt 

[ 0 0 0 8 ] fiJffi#«rft««tC/^7- K&fijfflrn 
0 fi»^J8l/T L* 5 iC^PJlH^fe**. 
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[0009] m 2 <z>«*a«t4. Mmtftrnw- 8-u 

7 5 0 0 ^ft«fc*<*ns«fc3fcfcG>T*D, SSfr*« 

(t^^^^r y btfim&iste-\,*mmv>mj5&&Etir&. 

[0 0 10] L,j&>L,fc**fc, CO^&TfS 

*iry h©jEStt*»H#fcaE?ST3>Ci:*«ffl«lc:a: 
*, (2) .^ir* h^^ff^t^IE^COjiff ©rt*"b« 

- & £ o m m * © « ^ u a* a m £ n r ^ a ^ e: t * se w t 

[0011] JB 3 6 - 5 2 

5 1 8 ^tfifcasSn* «fc 3fcfc©T* 0, ttfEROxI 

[0 0 12] Z<Djj&\±* KEEOfc«>ft:MfflSn*t>0 

y K*BE91«Bt;:»«"f i20^*Mi:^ 

M*UT«/fi#©*«£««^T<f>&^ d <*: * IE ^ T? £ 

[ 0 0 1 3 3 COcfc-SJC, tt*©a«tt^1'tl i b, ^^r 
y btZ&gte*TEmm&S)j±'rzmi£&nmir*t£tb 

[0014] cnsoraa 

Sffi t LT * ^I¥9 - 1 8 8 0 6 4 ^ (¥/&9^7E 
140, *4>BB) fc^r*ffi^il**nT^5. 
[0 0 15] CORHjBtSCD-JBfittBK^DhDJl/fc 
HltC^T. :©?DhDJH 5K*|6]G>BSE€:fT5 7 
□ h^UT^O, 3R*75«KfiE«« (StltaR) fCtt 

-r * » * * s* B-r <t t .^--Tr-^-s u © jE-s-tt-srB 

SETS. *§£©BBEif$& (&R) ©-» (c * -/ -fe - >' 
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[0016] 01 &&mi,TMm&ffi<D7n bzu\stzz> 

8l:i^lJXBEffSC«:4rtb (Sll) , £©BgE 
ttRC«ER)tll:MLT.S« (S 1 2) . SEE 

mx%&mmm\zj£% tsi3, shj. E9i&B£ 

10 ^pJtit^ott^. &IiE=£Btex ©-fit;:, figBtfSi 

U ttfflEKB3^*«LTK9i&Btc£* (S 1 5, SI 
6) . tE^&Bte/fcgff&iO ©^££?&igt-5C£tC^ 
0, ««#j&*jE£&*1SSBT**c:££«BU, -ttl 
£fc^Trt^tf$g^H©^/z©IEb3£*£ig-r* (S 
1 7) . p a*iEm»£K:©-&., IE^ttB©A«ttllfi3&f 
^rt^:Ud^tgl$ne (S 1 8) . iE^SB 
JEMSfcfffifcanfc^y h t £ EE 91 £ B S ^ fff d 
u^e, D £&5c-r* Z tWoim-eft 0 (S19) , i 
20 «fcIEWtt«RlCDIC«fc*»**«UT, ^SE&BfCg: 
0 (S20, S21) , ttffiE&BI**-<Z>S«&ffiB-r* 
Cil:J:D, Jfea&enfc-y— (S22, 
S23) . 

[0 0 17] C©*ttlCJctl«. 5"^^ H©*tEf»«(4 

[0 0 18] ttBEKBiiliEWKB^-tn-fnoe 
IEPJSB '• *IESiBO«ii©HH**ftl/Tt» 

[00 19] C © cfc fC, CO^^tt^©^&^^a 

[ 0 0 2 0 ] 5feOPiiJiitfi, ttiEKB^ 

5=-4ry K^4t5^f Slf^^IiEB^^BtciMSCifc^ 0, 
ttaEJSfi^ttEL tfSflr^ H^IEB^gB^^-C 1 

fi, ^OttlEeBT7«iERrffiA^iry h^SEWKfirtt 

^J&W^&iiltfft^^^s/ h^liE^aBOtlcfiFfc-r* 
:^»0?*. ^©<fc-5«c»^, KEWSIETtt. if© 
^*T*j b &f»Jffi*^fiJffl L J; 5 t Itl^W^fiJitl, 



1 1 

a<* e & c&mm tznry b^mnr^^w^^-r 1 

CO 0 2 1] ^IT, Z<D£oUmW\Z&^T. ifeOl 
Eft^^j^^-r^xh, 9try blzttfoTZft&Vtmog: 

coo2 2] zniz. mmm&t&irz^tr y. b 

£i§ftbTb£-p Mm b H 9 *r y b <D F^95 

[ 0 0 2 3 ] «5I©18#te:iig/flT***£#;3tS 
4, LT. Aii§<D&^££§bT£i£, £UWI$ 

fCA«OB2&£Siggi-££4(;:J;0, * -fe ;KZ> «fc 3 fe ^ 

jEff *&i»jh-rs ci:^*^ en*. 
[ 0 0 2 4] A*§oiif|g4 br, itUcAJi bfc 

©I^^^SI^tSCtK SE^^StCiHoTL* 3 4, 
*#*-©rcTttA»"C£fc^iry hC^btfe, A4§ 

■eft^^y h-eoxaiift&n^ A*§£*g^<*n 

TH*SE9!*B*^fc:An* Cd:d«T«<5i« 4, ft 
(C &o T b £ 5 , 

[0025] ^coj:p{c, mmmtfi* uwv&o t.?z> 

h&B &a«T*J; 3fc«*fc:Wt. tt&ESB». 

- * 4- v v mviEmz * k- pi C £ 

[ 0 0 2 6 ] b*>L, ft©B8»a*«c*^>TJ4, Z.<D£ 

5^«B^«*n/j;^fc«i>, «ffl#^«oT*ia b/ct^ 

[ 0 0 2 7 ] 

^HEl"* C 4rt*IEb < fc^^ry h tC#b 

[ 0 0 2 8 ] 

[a$]gi£^fcT££*!>O^I£] ±K©l*jB£#*-r*fc 

a HE tst se ■■ wsrsa u o , ^^n>rh & se s b « , «t 

lET^^^ry K^ttEKBTttliEalffi^if^^S:, ffiEH 
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try hWSfftt^ fiEUi8B#^$- * h&&1£35£gfcb 

[ 0 0 2 9 ] ilOjftfcfc-feHTte. ttlESB^, 
h«S* SfcS^T, BE^fifirtO^dry hCDBI^tt 

[ 0 0 3 0] 

[0031] m»m i ] m ? *c*«?go*as« i <z)t 

¥9- try b i/Ay L /±<Dm!$.m£7jkT. B2fc43tr>T, * 
SIMIc^ttff^yh^TAtt, ttSESIB (ttSE 
§§4*>^5) 1 0 OtSE^gg <HE^S§4*)H5) 20 
0 tnry Mi£KB 3 0 0 ^6^5, 
[-0 -0-3 2 ] &SE&B.1 0 0 tt, StlE-rs^er y h CD IE 
att«flSt5firyhfll)6Bl0 1i:, igi£1f$&£/£ 
20 «102t, SESSflf*g£/££i$ 103i, SEB^tf fS^£Efil5 
104t, tti£fiB»«1Sl«8Al$ffi 1 0 5 4:, IflCl 
0 6 <b£^A,T#fj££n*. . 

[ 0 0 3 3 ] SE93&B2 O0H SE 9i ^ © ^ *r ft 

$g£i&gf$2 0 3 4. BIEttr*B£j£«E2 0 4 t, SE 

wmm&m®2 o 5 4, se^b $8£/£g& 2 0 6 f^sp 

«««M2 0 7 t, SBff 2 0 8 4Sr^A.T^fig$n 
«. ftiS&IE&B.l 0 0 OlE^ff $8£6Ef5 1 0 3, B&E 
SI2 0 0 0&EI8fttt£Ji)6«2 0 6 14. -£-n^nS81iE3£ 
30 B 2 0 0, &&&B1 0 0 ^ SSI 6 nT < * KiE*« * 

[ 0 0 3 4] f^ry h «»«B2-0 '2\Z V ' 

4, %9*rv bizttfc-rznry bmmm 

n*. ^^r-y h^^^ 2 0 2 fcttfc-^dry htc^tt 

[ 0 0 3 5 ] SEnSfB 2 0 0 (i. F^0Pco^- 

[ 0 0 3 6 ] src, £<B*ffi«Ta«T©J;-5(c. 
40 y h t **«fif$n-&. 
[ 0 0 3 7 ] 

5=-^r^h: t=D-F (n t L . d u ) 

D : 9"tr y h^ffitt 

d u : SEWKBil^oeettffi 

n : ^^r?/ hffiR 

L : *> hfiJJB tillS 
fc^Tb, 
50 ED = 1 m o d n 
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E, n, F tt — JKOAy S^aBJftJCfc 

tOf^ry h€;«ffltS*tt, M*.««r»JWH*, If- 

[ 0 0 3 8 } *^^C0©SE^P H3JUZ>&I&£|2I3 fC^ 

try bm^mm3 0 0 »C<fc D BOBS 112 0 0 CUSUfe 
±7?, 10 0 £HE9iSB2 0 0 tiDffirmmzf 10 

[ 0 0 3 9 ] E!3Ci3t>T, M^Ph3^l?H *T 

i o o <D&mmm&j&& 102^ sssei* $g£ 

LTft»C££fi£LI£f?B&g 2 0 0 (S31, S 

3 2 ) o 

[ 0 0 4 0 ] ggffiffi«8&Sti-Ro£&E9Jfiff 2 OOlt 
3=-£ry MiEWf»«^ri6ffll31ftSlff"r-5 (S 3 3) . 
[0_0 4 1] 71ry bm*%mm$Ll&&W (S 3 3).._0.7. 

1 2 0 0 OIE^ffH±a82 0 6 ti. S«(cil!t>2>tBf& 20 
• Dfc, ^try h t t^^-y h Wfflf* « L *5 «fc XtfaWm 
SS«««S«f9S2 0 1 (Cftff^nr^SIE^KfiH*- 
»idu*»6, ^TC0ff^C(r «fc 0*ffif* (S41) . 

[ 0 0 4 2 ] 

[*7] 

t + F (n . L , d u) 

= D-F (n, L , du) + F (n, L , du) 
= D 

bWfem n*kl&M2 0 3 14, jEL^^y 

?^r^ h«#«2 o zw*rv bmmffim&£ztft 

««*IB»«-«©««^-6^fi!Er* (S4 2) o fiE-^flF 
f8£/&$ 2 0 6 te> IggH£$8CO bm<DT$L\Z7->r 
y hflSHHIMSiBl/ (S4 3) , y h iDE^i Wffl 

[ 0 0 4 3 ] 

[R 8 ] T= (C I I M) 8 mod n 
<DWcJ&\z cfc 0 £.f&1rz> (S44, fc*3iE# I Itthfyh 

[ 0 0 4 4 ] 40 
[»9] 



T= (CI I M) ' (CI I M) 



F ( a . L . 4 ■ ) 



mod n 



[ 0 0 4 5 ] &fE1«ffi£j£flS2 0 4 I*. SLS x * 

±d£LJS2 <OKfiE««<fr* (S44) . 

[ 0 0 4 6 ] ^ir* hEEW*T£«2 ©jgffiWBx 
fi, ilff fili 2 0 8 (Ccfc D&ffEgft 1 0 0 \zSk *>t\Z> (S 
- -3r:4v) « £ f tS-OI*-; 5 1 ^ s/ hK91flt*Ba<jELt>t> 



[ 0 0 4 7 ] T t x **Wfl»ofc*»ESa 1 0 0 tt^-Jr 
y h*iJ5£&£i (03CDS3 5) £fr? 0 

[ 0 0 4 8 ] ^-iry h#J£#m ((S3 tf)S 3 5) <D 7 D 
— ^+ — h 5 K^To 0 5f:*^T, ^lE^M 1 0 
0 ©SE9I1*fB*fiE« 1 0 4 tt, £ 6 flfc? 1 ^ y h &E9§fflf 

E rt> £ , 
[ 0 0 4 9 ] 

[ft 1 0] T 5 mod n 

yhOW. KiElf «c t-ar*^^^^€«K-r 
§ (s 5 1 ) . — at, $ sc^^y 

««M&affl"r« (S 5 2 ) . firy hfllSSl 

0 114, M^rtSS-btK^iry Mfctf^jry hfcMSI 

jft^5^S«St« (S53) , ^JjfcCD&JH* ZLCDfir 
y hSttBE SS£j5£gJ5 1 0 3 

^iMit, x ©TtefcSie-r* <s 5 4, sss) , 

«i^^TS«£tfciiptMt« (S56) . ft£ 

jssn*: p te, ana 1 0 6 ic«fc d $Ewmm 200 ^£ 
sisn* ( s 3 6 ) o 

[ 0 0 5 0 ] ^^3/ MEW«*8*«jEL^»feO-e& 

(4, T^n h3JU^i^7-r^ (S 5 7) . 

[ 0 0 5 1 ] fr\Z p *SttUtofcBE^«tBttrtffl«IB* 
(B 3^>S 3 7) ^fr^o 

[ 0 0 5 2 ] faBWim&m&W (03OS37) ©7D 
-^ir- h $H 6 (C^-T* ®6IC^ViT, SEB^^I^2 0 
0 (OBEK««*IE«2 0 5 tt, ^ 6 n^cB 2 OiE^fitlg 
P te#lr, S#3&««l»-b-T^*«-«E«» 1 0 0 <D&m 

[ 0 0 5 3 ] 

[»i i] 

6 mod v 

Srfff»L. N^iJco^ ife, ±ffi©tf»3^ % ^20 

ssemf m% t-a-r*^if ^wets <s 6 1 > . 

fi, ynhriJU€:i|»T-r* (S6 2) . jELiifeOT* 

(S 6 3) . ASKffiCfiB8B 2 0 7(i. v<Dfa®lZ!&C 
TaE^«H 2 0 0 C0rtffl«ffi&jeML, •ecD^^:^M , 
«fT5 (S64, S65) . KH1*ffi£/£8i: 2 0 6 

[ 0 0 5 4 ] 

[ft 1 2 ] R = (C I I M * ) D mod n 
OffgfCcfc 9* ilBflfg fSR^^^T^ (S66, S6 
7 ) . Rttii«ffl208*Ccfc O^SEj^© 1 0 0lzm>btl 
Z> (S 3 8) . 



m 
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[ 0 0 5 5 ] R*S^«ot*KSB lOOIt 
fgtt&Effi3 (HI3<Z)S39) £?t5. 

[ 0 0 5 6 ] mmm ®L&mmm (^3©s39) ©7d 



10 4 H8»bT^*f^y httlB 

[ 0 0 5 7 ] 

t»13] R ! mod n 

c i-gr-r^c: ^^siig-rs (s 7 i ) . mmx^ftm 

*ISrz>ffinu a-r«^£-5d»ft«BL/ (S72, S 

73, s 7 4) , mmtf-zzfziM&iz \z % ££>sn*:i* 
-tr**««r* (S75) . ^r*i*>a>*BK*«L 

fcft&H (S71, S74, S76 )_... 
[ 0 0 5 8] [«Jtfl2] ^^^O^J£^I2 tt, Hftftl 

[ 0 0 5 9] *«W©*IISWO*«^f iry 

fctte»3fc*L«-t?* 0 , SE^^g 2 0 0 y h 

»t«ui^*«, I C*— K©«fc3fc h — ^ >T£> 

[ 0 0 6 0] KT-Cli, 8t^-/$EB£*g 1 9 9 7 ^7^ 
1 8B©ft*#©W7?R§ltS. fc*3, SB*. (2l3<Z>;*t 

[-0 0 6 1 ] SCD^y y h L te* 09 O 

Ji-ptcAj:*. ^dry 2 0 0 Client* 

y b I 0 0 0 0 5 f C tf "T CD T & 

a. 

[ 0 0 6 2] ST, A*B*OKIECtPV»TBiWr«». \t 
U«)(C*tE»IBl 0 OttBSEWKCtit)^, A^T^ 
*C<fc£*£fcrWB*IEWSB 2 0 0fci£* (S3 
2) . 

[0063] CE9JgB20 0tt. N#l5£t1ff8M£ 
£J5S"T3. M(3ft££[2i 1 0 (C^"T. 7* y h¥'J£if*K 

c»<0rte**££nTns. KEHffi*R£j£ffi 2 0 6 \z, 

T. hIE9!19«T£ LT, £fi£b£Sfl 2 (DISHED 

$8 z 1 1 fciC&SE&IS 1 0 0 (S34) . 

[0064] fttEHISlOOtt, * h SE 9i fB & tt 
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hT*3£:«j££n* (S35) . 
[ 0 0 6 5 ] d T* mW%i&2 0 0 <Dft&tf:m%&m 

r. /ittt. A»K*<tfifMa*E»*n*-. EE9i{ff8£ 
ica^u ^mmmi o o (Dttmmm 6 K&z^^&m 

10 Lf;lip^4ii)cLt, 1^^12 0 0^15 (S3 
6 ) . 

[ 0 0 6 6 ] mmmm.2 o o o&wm m&m&2 o s 

fi* rt«««*I»jB 2 0 7 ^ju OrtftfcflSUT, SEB^g 
B2 0 0 CDftgStfcliSr^H-r* <S 3 7) . ^M&CDf*j 
««»©#^*eil 2 fc^f . A«OW!i:B#W3&t|B»* 
*l ^fd, rt««lllW»«.2-0 7 ttC© 

rtaS«»OftHc--r«tt) , 6 A1§!S&CDF^£M' it 
20 So Xttftl ltmmtz* WEW® $B£/£g&2 0 6li, M r 

T&IEgIB 1 0 0l:i^5 (S38) . 
[ 0 0 6 7 ] ttlEKS 1 O'O ttffiHftAROtt&tt&E 

f$#$l£^b£fc!r:§llM* £5ISS"f£. M ' ^/iT»3e 

bfc»b©t^«bTV5ntf, jel< rtfflttBj&fjesesft 

[ 0 0 6 8 ] *IC % titfJ§BS©!gIE£:f&B^f ^ „ 

30 ^se«, A»B9£te«i^«-r&*a*, tiSfce^t^ns 
[ o g-6 9-]- fib^fc^SE^M i o o : \z&mtffmciz£ 

(S 3 2) . 

[ 0 0 7 0 ] SEWmm 2 0 0 (D^tr y 
2 0 3 tt^Sr y KflJ3^^^M^^^-r-6 0 m<iP#OMCD 
F*g^*EI 1 3 tC^-T. SEBJIf ^^^§15 2 0 6 M^C 
(cS^b, 7 try NaB«Dfc«fc*»**llSb, ^4ry 
KIEB^lf^Ti-r^. ^LT, SE^It^Ti:, ^iEif$S 
40 ^^SP^^b^:^ 2 <7>&K««x #ttgE8«fcjSStt-& 
(S 3 4) . 

[0071] ^ie^© i o o <Dmwm m&mm I 0 4 

^iEbli»^fCt4. ?^-;h«3fciS10 I*?, ^^r*yh 
!R-efl"a«cA»iB©-C*0 , ffiiiiCD^^^r H lP*9T , *-5 Z 

^J^^nS (S3 5) . - " —TT 

[ 0 0 7 2 ] iEB^^$5^sJt^5 1 0 3 te3EBJ!£© 2 

50 0 0 ©rt«tt!8£»Ef afca&0>«« a a 



• 
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(Dftig&m 1 4 l:^to u fctt, ffi«R«£tjU«IQM*f 4 2 0@&E1ffH X ££Jb£-T<5 (S 8 6 ) • TtilJ 

|21*£n*. M.W®m&.J&ffl 1 0 3 14* £ £ (c, il««2 0 8 fc«fcO*Eg«l 0 0K»€>n* (S3 

tl&ja & z fc**SU &SEggCD&*gfi $8(5 (Ccfc£^£ 4) . 

p ££fi£-T£„ p «iEB^^g2 0 O^tl^ [ 0 0 8 1 ] T t x *g W*ofc«SE*Sfi 1 0 0 teT-^r 

^5 (S36) . y h (S3 (OS 3 5lC*#>Br) -5. 
[ 0 0 7 3 ] IE3Jlg(B2 0 O03E911*fRttfiEflS2 0 5 ... [0 0 8 2 ] , y h nfc&W<D y □.=■ ^ * — h & EI 1 

\z* mztift p <nm&> bkww x <t— at"*j&>£5> 8 (c^-r. h i 8 fc&^r, &£e&ii i o o <D8LBn\%m 

18M»ffi2 0 7 &tt<Dft®\zfcCT. H^&it2 0 0<D 5 (S9 l) . ^jry MEW*H8^jEb^*S-Ktt* ^ 

M ^JE^cdi^^^^co^T^EI 1 5 C^t, (S 9 2) . h *Jfi»*M K:ttl§I»#oa 0 lalSt 

ffi«JK£:»«!#ffi»3ft*. EEB^if^^^g|5 2 0 6 J4> #E»£ftTH*. ^ y h«Jfe« 1 0 1 1 

y hft«««lK:«fc*»*€rlSLfclE5H»«R**J«b, fa (S93) . £ b f3, ^^ry hfiJfflfll* L 

&gE3£fg 1 00l:iS (S38) , fc, Z<Dfe&mm 1 0 0T&IEpJS6T&£ t,^trv hm 

[0074] &mmm 200 nmmm&&.m»i 04« £«i 0 1 *«ww ufc»*icj4, sermf soften: 103 

R©««:*ffl:b, BE* SBC £: -§ft Lfcfcfi-I;: J4IE^^© 2 0 0 ©rt «tttt©*X*»?K-r * *t * 

tt, £ Sf;:rt$tfc&££Ml✓fcl&;f|IM• £«B"r<5,.„^_ . .fl?J*f<5 (S94, S 9 5 ) . u <Dft® t UX ®Wi& 

rt«tttta«*3Esnfcfc©£««u ffl»£Mi/T, 20 fir, kijsw i £mm<Dij&-?, u%$imuT$£2<D 

*"*L«<oy- h£Bi§#<5 (S39) . lEHttffip £f£/&L (S96, S 9 7 ) , |E^^® 2 0 

CO 0 7 5 ] [MM3] 3ii&#J 3 Tfct, m^^co^a 0-\<h^^ (S36) „ 

*»IR«r*a-r**»ft^-r. [ 0 0 8 3 ]. tftBE-^^y K*Jjefc*KLfc£ Sfcttx 

[ 0 0 7 6 ] aaleftfCtt****!©*!^^^ 1 ^^ h<Z>£ 5— fflS&frfe^ (S 9 8) . 

±^<^^L31<0^n(4^JS^J 1 tRit^S. * [ 0 0 8 4 ] p £gttSfco£IEip!££e 2 0 0 f 4 F*9 £15 # & 

*JS0!l IS 1 6 fc^c-To #^;&&tf|0D$$£&<b ^M^S (0 3 COS 3 7 tc*f&) £fr 5. 

it, ^gpt^fiio^tc. ig»#©3at)«ft&^r*.C7> [ 0 0 8 5 ] rtffttttM&so^n-^*- h£iai 

* 2 0 2 a a*Kfi£nTH*jaa«»Jk*. E3 1 6 fc*5H 9 El 1 9 IC*^T, £E^^1E2 0 0 OfiEIBfflFtt 

T(4, 02 <b#/£T5®^fc:#/fcrs#^£ttLfc. &SEgB2 0 5 \*m *> tlttM 2 <DMm®m O £&SET* 

[ 0 0 7 7 ] mm%iZ\B!%i&$:ffi\T% t* ItC&lZM 30 (SIOI).jELH tMBt*fcaS 

^^i2oociits. a»i*icisR#fc:*f*-rsrti icj4, rt8s«»tt»a^MOrt«(c*i:r, i§ift#<z>9t 

tfKffiGtttM«^-«A-$n. *VU&0j3&->* 2 0 2 -- 0«^-®R* 1 «^b- i --tO»*&M ? (S -10- 

a a_0 ©«Effllsl»*«»#ii*n4. 2 - S 10 4). &<!:J4, StftNl R*<0;&tt-C, IE 

[0078] ®»#(ommmtz\tmm&\t. mm^m2 o o t4iiE^if $sr££/&lt, &m%m 1 o o 

0 0 (C#LTCn^efiJffi-r«^4ry htLT, ^^ry ICS* (S105, S106) . Zfv^SlOl 

h^£3£ft3 0 0 CiO, !3»:#€:S£Lfc±T, ttSE BEC**bfci€ric(4X7-a31^fT)&:totl* (S10 

^noo tmmmm2 o o iKow-cBK^n h n 7) . 

^i&^n^, [0 0 8 6 ] &P$co&IiEg^l 0 0 col^f^(4, HM^Jl 

[0079]^iiE7 F n hn;UTf4, ^M^^ 10 0^, <h(^^T^0, R (DM £&SE b T\ IJ— tf^oaftifr 
©iiElf LTSL^C ^^fi£LSE0>g^g 2 0 OtCiSIO, 40 

KW»B200 a*, ^^ry MfcSBtt^ff^l-Stc:^* [ 0 0 8 7 ] [S5Jfi0J 4 ] COUffi^J 4 T tt, 

ti4, ^ss^j i tmmr&z. ©«ritw*ifiw i hamtiii' 

[ 0 0 8 0 ] **««<Z>^4ry SSEBJff^^^^S (fgl ^7 h»*f»«-^^ir5/ KOfg|E*»3&«S/j: -6. 

3 ©S 3 3 (3^^) (D7D-^-v-h^EI17tC^-r o [ 0 088] # Jl£ M #J "C (4 , p 0 , G^MM 

E117(w^V5T, EW81 2 0 0 Ofiryh«Sf«4 »»BH^fflll&*«»t* 0, g ^*ffi» G Ofift p 

fi£S& 2 0 3t4, CCOIalft^O^^y hJC»*Lfcrt«tt cOtcT^O. 

tt©aoisi»sttffiL, y bftmmmt ttic, ^ coos9] 

^•7 hflStt*Ml:E*ta (S8 1-S84) . ft [»14] y = g' mod P*-:. to -rT^-s; : - 

t, SfltflUHSI:, «EW»«tfilEB 2 0 6 ^fir«; ^MtSnsit, (p. G. g. y ) y h 

hffiES^f^$aT€:^fiScL (S85) , VZMmm $Lf$.m 2 0 50 m$aT^0, ^ry KMHHitra. (p. G. 
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[ 0 0 9 0 ] ZL<Dt€, ?iry Hi^^yhftamgx 

8t£T£i*$&P «fc 0, 
C 0 0 9 1 ] 

[R15] t=x-F (du, L, y, p ) .„ 

— iftOAy S'aBBRfc.fcoT^SflTIIlT* 

[ 0 0 9 2 ] £fc, &IE&B<D£!rJf *>:bT fcCDi: b 10 
T. ±IS (p. G, g) \t#kMtVT. 
[ 0 0 9 3 ] 
[Si 6] 

?7 = g f mod p 

[ 0 0 9 4 ] ssi»k:«Gft*tt»i br««bfc 0 . # 
[ 0 0 9 5 ] *&m<Dt®mzrn b^)yom^^m2 ok 

t + F (y . L, d u , p ) 
= x - F ( y , L , du, p) 
= x 

^y h«)fe««£]««2 0 3 li, lEb^^y 

* (S 2 1 2) • ?8£ji£gf$2 0 6 tt, SE93fgfg<b 

Lt, £AT<ate£3EJ5fc-r* (S213, S214) . 
[0101] 

[Rl 8] T= (C f I M) • C 1 mod p 

[01-02] - 

[ft 1 9] 

T = (CI I M) ■ C cV , ' l ' -1 " ) mo d p 
Sfc. KSEttF &£fifc$(52 0 4 ttHWtcaR r ' ££/&b 
T, 

[0103] 

[1^20] x = g'' mod p 

2 0KIIflt«£ bT*ERBfc:iS* (S2 15, S 
216, S205) . ^y hWfe»«MtCAS««tt 40 

1 - 3 £H«T**. 
[0104] KWfl»«T<h»2©IgEE««x tt, MmU 

2 o 8 tcfc o&Kmm lootcgens. 

[0 10 5] T t X fcSW-ttofcfcBERB 1 0 0 te? 1 ^ 
7 (EI20OS 2 0 6 ) £fr?. 

[0 106] ^^r-y h«£ffl,a©7 P-^^- K£l2i2 
2CSt. H2 2fC*5^T, ttKSBl OOOIiE^ttW 
&£Efl$10 3l*, iSenfc^y hEW»«^6. 

[0107] 

[»21] T/y' mod p = (C I | M) -C'/ 50 
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[ 0 0 9 6 ] tet&tzmmmn* cn^sfijffl-rs^^ 
[009 7] H2 o fc£v*T* c<nmKzfnbn)i-Q 

£-f t&iERiE i o o <omm.m m$=!&® 102^ sl 

iTIEiSltai (S 201, S 2 0 2, S20 

3) . 

[0098] E&mmnc& 2 0 0 

tt, ^y hmwmmtbj&mmzmfT'rz cs 2 0 

4) . 

[ 0 0 9 9 ] y^ry MiEW«S4*ffll07D-f t- 

h^ia 2 1 fc^To sr 2 1 k*^t, &?mm%im 2 0 

0<DEf3««£j«ffl2 0 6 tt, S«(C/gfr>2>tBffittx 

Id J;f3»tfi-r-5 (S 2 1 1 ) o 
[0 10 0].., .„ 
[Rl 7] 

+ F(y,L,du,p) 

y ' m o d p 

(S 2 2 1 ) . -gcb tcti, ^£ry K^JJtSP 1 0 

tf^^y h fcW*m*&nfcrt«ttll*«;iG>ttERB 1 
0 01?ftfilTAlr>t>fl)*>^5i&^«et5 (S2 2 
2, S 2 2 3) . m&(0»m. £<D^tr y bZ&MLT 

&^®$iz mwmm&i&M i o 3 i£K9§RB2 0 0 

jfg-T* (S 2 2 4, S 2 2 5 ) • fit, C <£> fit (C # b 

t, *K*ifi<o#ii*a"r»««f«e *ffl^T£JiTo!?j» 
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